Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BAD1D189E9311F0A7FE8DF6DAE4EC9C.roa
File: 2BAD1D189E9311F0A7FE8DF6DAE4EC9C.roa (raw, json)
Hash identifier: IPHAH8VWKuN76C0pHih/i12HzOTzP0tVI6lryOYjUV0=
Subject key identifier: 7C:44:50:69:76:75:56:62:09:2F:FA:13:68:30:43:77:BC:31:D3:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BAD1D189E9311F0A7FE8DF6DAE4EC9C.roa
Signing time: Wed 01 Oct 2025 06:52:18 +0000
ROA not before: Wed 01 Oct 2025 06:52:12 +0000
ROA not after: Thu 06 Nov 2025 06:52:12 +0000
asID: 20326
IP address blocks: 156.229.26.0/24 maxlen: 24
156.242.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97852 (0x17e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 06:52:12 2025 GMT
Not After : Nov 6 06:52:12 2025 GMT
Subject: CN=68dccfa2-b827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:31:c8:2e:dc:ec:76:c4:d4:48:15:6c:7b:94:
4c:c4:94:d4:cc:77:c5:35:ca:63:c8:74:78:ca:49:
f9:2c:29:11:15:01:5d:53:b2:77:fc:1d:5b:7c:2b:
e3:11:8d:dc:7c:42:d2:78:da:e9:be:48:dd:e5:f3:
77:50:92:63:e6:3b:bf:16:53:d6:bd:aa:1f:93:60:
41:12:cb:cb:12:55:9d:6e:f5:1c:6b:89:39:4d:29:
37:e6:f1:b4:4b:90:12:94:25:f9:79:6d:55:96:bb:
a1:03:bf:b8:e5:e8:3b:9b:98:72:2a:f2:54:dd:73:
e0:3a:3c:94:4d:df:05:04:ee:33:20:c9:46:01:b6:
66:02:0e:fd:d1:f0:02:78:37:c8:d6:53:48:5a:bc:
c7:7f:7c:71:b2:04:ac:e9:d5:51:1f:92:6c:6e:70:
77:d4:2d:ce:fb:17:0d:34:46:a1:f5:d5:f8:37:24:
c2:d0:42:1e:73:05:c0:33:ac:77:b8:8b:a9:5a:49:
37:fc:8d:ca:52:5a:d5:de:52:da:97:cd:26:50:b3:
0e:3e:f2:d1:ac:c2:9b:6d:44:75:cf:3b:1e:f7:98:
15:e0:e3:c9:4e:1f:64:d5:e5:af:29:b4:34:2d:ad:
27:45:70:85:67:d6:81:1c:e6:ec:c8:5e:47:f8:21:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:44:50:69:76:75:56:62:09:2F:FA:13:68:30:43:77:BC:31:D3:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BAD1D189E9311F0A7FE8DF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.26.0/24
156.242.124.0/24
Signature Algorithm: sha256WithRSAEncryption
77:56:a9:c3:2a:42:6c:4c:f3:21:2c:29:21:a1:c0:f6:03:bf:
d2:64:64:d4:19:48:dd:af:c7:68:fe:85:cc:be:bc:66:15:9f:
ba:d9:49:f2:f2:7f:72:5f:75:06:e3:7e:68:ff:3d:e0:d3:8e:
e5:2e:70:c0:2b:23:57:16:1f:e1:fc:12:e8:52:af:fc:ff:f3:
be:11:cc:98:f6:12:d9:6f:79:dc:84:06:d0:66:68:53:25:52:
26:18:58:bc:d8:36:47:48:fe:a9:49:f8:6a:e5:a7:9f:60:2c:
8a:fd:d3:09:14:da:df:10:87:25:1e:49:24:69:2f:d8:99:0c:
2b:5a:c4:a6:67:d7:d0:d3:0d:fc:89:e9:5a:ca:8b:6f:e5:0e:
64:a6:ca:ff:f2:dc:99:43:df:1c:6d:5b:ba:10:29:c4:71:a0:
dd:16:97:31:f3:d2:6e:ac:a0:48:db:ae:9a:ee:7c:f1:c5:ca:
0b:bf:a2:e3:47:f8:89:89:3d:f6:b2:bb:4e:17:65:26:b3:0f:
90:1a:56:8b:5b:e5:99:88:a4:26:45:09:8a:19:31:5e:81:67:
15:a9:2d:92:81:82:84:79:68:7a:19:84:d6:3c:32:2d:61:ef:
f8:58:49:08:98:5e:2f:50:73:4a:6f:0a:e9:b4:c0:a3:db:2b:
ee:5f:b2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:05 2025 by rpki-client